14448 matches found
PT-2023-22058 · Juniper Networks +1 · Juniper Networks Paragon Active Assurance +1
Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance versions prior to 4.1.2 Description: An issue in the timescaledb feature of Juniper Networks Paragon Active Assurance allows an attacker to bypass existing firewall rules and limitations used to...
PT-2023-35778 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash involves the dwg ref get object, dwg geojson feature, and dwg geojs...
CVE-2023-24934
Microsoft Defender Security Feature Bypass Vulnerability...
CVE-2023-24934
Microsoft Defender Security Feature Bypass Vulnerability...
CVE-2023-24934
CVE-2023-24934 is a Microsoft Defender Security Feature Bypass vulnerability. Public records show an attacker exploiting a local, low-complexity condition to bypass Defender security checks, requiring no privileges but user interaction in the NVD/OSS metrics, with confidentiality impact rated Hig...
CVE-2023-29018
The CVE-2023-29018 issue affects the OpenFeature Operator, where overly permissive access on the open-feature-operator-controller-manager can allow cluster-wide privilege escalation. Multiple sources (Red Hat, NVD, OSV, GHSA, CNVD, Veracode) describe that an attacker could leverage lax permission...
Microsoft Defender Security Feature Bypass Vulnerability
...
Microsoft Edge (Chromium) < 112.0.1722.34 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 112.0.1722.34. It is, therefore, affected by multiple vulnerabilities as referenced in the April 6, 2023 advisory. - Microsoft Edge Chromium-based Security Feature Bypass Vulnerability CVE-2023-28284 - Microsoft Edge...
Node.js: Dependency Policy Bypass via process.binding
The use of the deprecated API process.binding allowed for the bypassing of the policy mechanism in Node.js, potentially enabling the execution of arbitrary code outside the defined limits in a policy.json file. This vulnerability affected all users utilizing the experimental policy feature in...
GHSA-CWF6-XJ49-WP83 OpenFeature Operator vulnerable to Cluster-level Privilege Escalation
Impact On a node controlled by an attacker or malicious user, the lax permissions configured on open-feature-operator-controller-manager can be used to further escalate the privileges of any service account in the cluster. The increased privileges could be used to modify cluster state, leading to...
CVE-2023-28300
Azure Service Connector Security Feature Bypass Vulnerability...
CVE-2023-28300
Azure Service Connector Security Feature Bypass Vulnerability...
CVE-2023-28270
Windows Lock Screen Security Feature Bypass Vulnerability...
CVE-2023-28284
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2023-28284
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2023-28269
Windows Boot Manager Security Feature Bypass Vulnerability...
CVE-2023-28269
Windows Boot Manager Security Feature Bypass Vulnerability...
CVE-2023-28249
Windows Boot Manager Security Feature Bypass Vulnerability...